Effective Date: September 29, 2026  |  Last Updated: September 29, 2026
This policy covers the Android version of Hush, distributed on Google Play. For the iOS version, see our iOS privacy policy.

1. Introduction

Hush ("we", "us", "our") is a spiritual wellness application that supports your daily Islamic practice through daily rituals, prayer times, a dhikr counter, the Quran, a du'a archive, an AI companion, listening content and home screen widgets.

This Privacy Policy explains what data the Android app collects, why, and what rights you have. Hush does not require an account: there is no sign-up, no password and no email address.

By using Hush you agree to the practices described here. If you do not agree, please discontinue use of the app.

2. Data We Collect

2.1 Device & Technical Data

When you first open Hush, the app registers an anonymous device record containing:

This lets us serve content in your language, keep your subscription status in sync, and secure requests to our backend.

2.2 Location Data

Hush asks for location permission for two features:

To show your city name, the app uses Android's built-in geocoding service, which is provided by your device and Google Play services.

We do not keep a history of your locations, we do not track your movement, and we never sell location data. Location permission is optional; declining it leaves the rest of the app fully usable.

2.3 Information You Provide

Some screens invite you to enter a first name or a birth date so the app can address you warmly and show a personalised verse. This is optional and is stored only on your device. We never verify or transmit your legal identity.

2.4 Confidant (AI Companion) Conversations

Everything in this feature is started by you. When you use it:

These conversations can be personal. Section 4.2 explains how our AI provider handles them.

2.5 Journal, Worship & Progress Data

Your daily notes, ritual completions, prayer tracking, missed-prayer counts, dhikr counts and streaks are stored locally on your device. They are not uploaded to our servers.

2.6 Subscription & Purchase Data

Subscriptions are purchased and processed through Google Play Billing and managed with RevenueCat. We never receive or store your card details or billing address. We only receive your subscription status, such as active, expired or cancelled.

2.7 Notifications

Hush schedules notifications on your device: prayer reminders, the dawn prayer alarm and the live prayer countdown. The Android app does not use push notifications, so no notification token is sent to us or to any third party.

3. Data We Do Not Collect

On Android, Hush does not collect:

We do not sell personal information, and we do not show ads inside the app. If we add an analytics or measurement service in the future, this policy will be updated before that version is released.

4. Third-Party Services

The Android app communicates with these services and no others:

4.1 Supabase (Backend)

Our backend. Holds the anonymous device record and the daily content library, and relays Confidant messages to our AI provider. Hosted with encryption in transit and at rest.

Supabase Privacy Policy

4.2 OpenAI (AI Processing)

Your Confidant messages, any image you attach and live voice audio during an AI call are processed by OpenAI so a response can be generated. Requests travel over encrypted connections. Per OpenAI's API data usage policy, data submitted through the API is not used to train their models.

OpenAI Privacy Policy  ·  API Data Usage Policy

4.3 Prayer Time Service

Your approximate coordinates are sent to a prayer-time calculation service to produce the daily schedule. The request carries coordinates only, with no identifier attached to it.

4.4 RevenueCat (Subscription Management)

Verifies purchases made through Google Play and keeps your subscription status in sync across reinstalls. Receives the anonymous device ID and purchase events, never personal information.

RevenueCat Privacy Policy

4.5 Google Play

Google processes all payments, renewals and refunds, and distributes app updates. This is governed by Google's own policy.

Google Privacy Policy

5. Permissions Hush Requests

Every permission is optional and is requested only when you open the feature that needs it. Declining a permission disables that feature, not the app.

PermissionWhy
Location (approximate or precise) Prayer times for your area, your city name and the Qibla direction
Notifications Prayer reminders, the dawn prayer alarm and the live prayer countdown
Microphone Voice conversations with the AI companion
Camera Only to take a photo you choose to attach to a Confidant message
Alarms & reminders Ringing the dawn prayer alarm at the exact time, including in silent mode
Run at startup Restoring your scheduled alarm after the device restarts
Display over other apps Showing the Focus lock screen above a distracting app
Accessibility service Used by Focus only. While a focus session is running it detects which app comes to the foreground so the lock screen can appear. It does not read, record or transmit the content of any screen, it sends nothing to our servers, and it is inactive when no session is running.

6. Data Storage & Security

On Your Device

Nearly everything personal — your name, journal notes, ritual and prayer progress, streaks, dhikr counts, Confidant conversations and preferences — stays in the app's private storage sandbox on your device, protected by Android's device encryption. Uninstalling Hush removes it.

In the Cloud

Only the anonymous device record lives on our servers. Confidant messages pass through our backend to the AI provider so a reply can be produced.

Security Measures

7. Data Retention

8. Your Rights

For All Users

For EU/EEA Users (GDPR)

For Users in Türkiye (KVKK)

Under Law No. 6698 on the Protection of Personal Data you may learn whether your personal data is processed, request information about the processing, ask for correction or deletion, and object to results produced solely by automated analysis.

For California Users (CCPA)

To exercise any of these rights, contact hush.app.official@gmail.com. We respond within 30 days.

9. Children's Privacy

Hush is not directed at children under 13, or the applicable age of digital consent in your country. We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

10. International Data Transfers

Your data may be processed outside your country. Our backend (Supabase) and AI processing (OpenAI) may run in the United States or the European Union depending on server configuration. Where data crosses borders we rely on appropriate safeguards, including standard contractual clauses and encryption in transit.

11. Cookies & Tracking Technologies

Hush is a mobile application and uses no browser cookies. The Android app contains no advertising, attribution or analytics SDK, so it cannot track you across other apps or websites.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or in applicable law. When we make significant changes we will notify you in the app or update the "Last Updated" date above. Continued use of Hush after changes are posted constitutes acceptance.

13. Contact Us

Questions, concerns or requests about this policy:

Hush is operated by Hush App. We are committed to resolving privacy concerns promptly and transparently.